{"ip":"94.154.46.245","total_events":3245,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"98 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["98 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"1,952,092 bytes sent","bytes_sent":1952092,"session_seconds":2,"persistent":false}},"first_seen":"2026-09-07T21:35:18","last_seen":"2026-09-28T04:47:33","events_24h":0,"events_7d":1800,"geo":{"country_code":"US","country_name":"United States","region":"New York","city":"New York","lat":40.7503,"lon":-74.0014,"asn":202412,"org":"Omegatech LTD"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":1745},{"port":80,"proto":"tcp","label":"HTTP","count":1500}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["2196848d251b217de8b2c037e356c11d"],"http_akin":["a11cun040_0000004d_aa48e2c8"]},"fingerprint_peers":{"t13i131000_f57a46bbacb6_ab7e3b40a677":4917,"a11cun040_0000004d_aa48e2c8":3432},"akin_families":{"a11cun040_0000004d_aa48e2c8":{"head":"a11cun040_0000004d_aa48e2c8","shapes":5,"ips":3438}},"user_agents":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"timeline":[{"date":"2026-09-07","count":545},{"date":"2026-09-12","count":300},{"date":"2026-09-22","count":600},{"date":"2026-09-26","count":600},{"date":"2026-09-27","count":600},{"date":"2026-09-28","count":600}],"recent_events":[{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/server/.env.local","summary":"","payload_hex":"474554202f7365727665722f2e656e762e6c6f63616c20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"b7bf8dfb-2e64-41e6-8022-1764373185d0","seq":5,"duration_ms":559,"bytes_in":892,"bytes_out":390},{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.prev","summary":"","payload_hex":"474554202f2e656e762e7072657620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"f4f8aab7-b5ac-41d7-bf71-5860be248fc0","seq":5,"duration_ms":560,"bytes_in":864,"bytes_out":390},{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config.php.bak","summary":"","payload_hex":"474554202f636f6e6669672e7068702e62616b20485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"54bf6245-5235-4aa1-a342-67ebdf0f9d2c","seq":5,"duration_ms":560,"bytes_in":858,"bytes_out":390},{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config/app.php","summary":"","payload_hex":"474554202f636f6e6669672f6170702e70687020485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"5bfbb0e0-762c-48cd-9536-b44cdec7e054","seq":5,"duration_ms":560,"bytes_in":853,"bytes_out":390},{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/conf/.env","summary":"","payload_hex":"474554202f636f6e662f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"f63441d0-3089-4576-af18-7c7aea73fc90","seq":5,"duration_ms":559,"bytes_in":856,"bytes_out":390},{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config/.env","summary":"","payload_hex":"474554202f636f6e6669672f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"cc4423a4-f7bd-40ba-bae3-f66d825bc6b4","seq":5,"duration_ms":562,"bytes_in":872,"bytes_out":390},{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/public/.env","summary":"","payload_hex":"474554202f7075626c69632f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"7be49171-be0d-4bc7-ad97-4db8aba6bb31","seq":5,"duration_ms":559,"bytes_in":877,"bytes_out":390},{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/client/.env","summary":"","payload_hex":"474554202f636c69656e742f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"67858590-8e0f-432d-aeae-4500362fb1c5","seq":5,"duration_ms":558,"bytes_in":864,"bytes_out":390},{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/server/.env","summary":"","payload_hex":"474554202f7365727665722f2e656e7620485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"e93a0c37-db49-42b5-bc7a-bfa61a6196ac","seq":5,"duration_ms":558,"bytes_in":864,"bytes_out":390},{"timestamp":"2026-09-28T04:47:33","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.env.old","summary":"","payload_hex":"474554202f2e656e762e6f6c6420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c65626f742f322e313b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","ja3":"","session":"271cb630-04ec-40ec-afc1-1dcab65911d3","seq":5,"duration_ms":559,"bytes_in":848,"bytes_out":390}],"http_methods":[{"method":"GET","count":3245}],"distinct_ports_total":2,"top_paths":[{"path":"/.dockerenv","count":22,"ports":2},{"path":"/.env.txt","count":22,"ports":2},{"path":"/wp-config.old","count":22,"ports":2},{"path":"/phpinfo.php","count":22,"ports":2},{"path":"/env.txt","count":22,"ports":2},{"path":"/.ssh/authorized_keys","count":22,"ports":2},{"path":"/.env~","count":22,"ports":2},{"path":"/.yarnrc","count":22,"ports":2},{"path":"/env","count":22,"ports":2},{"path":"/instance/config.py","count":22,"ports":2},{"path":"/docker-compose.override.yml","count":22,"ports":2},{"path":"/docker/compose/withMySQL/.env","count":22,"ports":2},{"path":"/.env.production.local","count":22,"ports":2},{"path":"/.env.new","count":22,"ports":2},{"path":"/settings.php","count":22,"ports":2}],"distinct_paths_total":150,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-29T14:05:15.717852+00:00"}